Security Engineer , Cloud
Qualys, Inc.3 days ago
Pune, IndiaMid Level
Responsibilities
- Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud-provider configurations.
- Build Agentic AI and LLM-based workflows for signature development, security research, compliance mapping, validation, and workflow automation.
- Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
- Track cloud-provider updates and assess their effects on existing signatures and compliance checks.
- Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
- Map security controls to CIS, NIST, ISO 27001, and PCI-DSS benchmarks.
- Collaborate with security research and engineering teams to deliver scalable automation solutions.
Requirements
- Hands-on development experience with Python, REST APIs, JSON, and scripting.
- Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
- Knowledge of Terraform, infrastructure as code, and security assessment of cloud infrastructure configurations.
- Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
- Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
- Knowledge of security benchmarks such as CIS and NIST.
- Strong analytical, debugging, and problem-solving skills.
- Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows is preferred.
- Security or cloud certifications such as CCSP, CISSP, or AWS, Azure, or GCP certifications are preferred.
Categories
About Qualys, Inc.
Qualys builds a cloud-based security and compliance platform used by enterprises to automate vulnerability management, IT asset visibility, web application scanning, and policy/PCI compliance across on‑prem and cloud environments. Delivered as subscription SaaS, its Enterprise TruRisk Platform uses a single agent to provide continuous security telemetry for endpoints, servers, containers, and clouds. Founded in 1999 and headquartered in Foster City, California, Qualys is a public company trading on NASDAQ (QLYS).